$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/14cab7a4-9592-3724-82d8-0c2cba745ca8.roa File: 14cab7a4-9592-3724-82d8-0c2cba745ca8.roa (raw, json) Hash identifier: MnR0P0LTt1t/H9uJ05NqXovgvRZ6MbM39LrZLli01Gw= Subject key identifier: B3:70:99:3C:06:F3:6E:F3:CF:68:5A:66:EE:6A:EB:0A:71:72:68:8D Certificate issuer: /CN=d7a960e2-9fa8-4b77-8609-5ee424f44087 Certificate serial: 010D0C9F4328584BC27066EBA488147597056F80 Authority key identifier: A2:A6:EF:CB:44:3A:94:85:33:05:1B:25:CC:81:A8:4A:7E:34:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/14cab7a4-9592-3724-82d8-0c2cba745ca8.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 19318 IP address blocks: 216.219.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/d7a960e2-9fa8-4b77-8609-5ee424f44087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/d7a960e2-9fa8-4b77-8609-5ee424f44087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:66:eb:a4:88:14:75:97:05:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7a960e2-9fa8-4b77-8609-5ee424f44087 Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=366b025f-5e19-4555-b339-3419ab7188a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9d:f1:96:10:78:42:7a:58:1a:a6:fd:d9:57: 47:59:e2:1a:7d:ea:22:bc:fa:ae:9a:e5:ae:d9:e8: d0:8f:58:25:dd:58:f0:ca:62:26:ba:0d:12:9e:82: d5:fb:28:8d:94:4a:be:5f:82:94:f3:dd:bc:14:c8: 65:7e:b2:0d:66:34:35:6b:f1:05:cb:f7:6e:5a:fa: 8a:ef:a8:e9:0d:67:75:61:9e:46:92:04:92:7d:ba: 80:48:b1:51:9d:66:18:42:a0:93:ba:3a:3d:67:51: c5:8d:3a:29:e5:74:f1:95:7e:5e:ae:2e:e8:2d:77: b6:e6:2a:ec:90:8c:67:75:a9:10:16:a3:4f:1b:56: 8b:58:2f:b6:f2:08:fe:d1:89:c5:12:12:da:e3:f9: 2e:a3:17:ca:11:f9:9a:3f:7d:1a:61:aa:e9:a3:00: ee:46:bc:2b:15:e1:1c:8c:9f:57:55:80:ba:8d:45: ab:fd:89:0c:5a:c1:dc:12:7f:9c:fd:0e:44:75:dc: 80:8d:44:5e:73:7f:b2:d5:7a:41:5e:24:5a:96:c2: ba:45:b5:78:d9:e9:a1:1a:99:d9:a1:0e:5c:c6:da: 95:a8:5f:87:b3:9d:76:01:fd:64:9b:23:77:e5:3b: 40:d6:d7:cb:46:60:54:ff:2a:24:61:98:c6:63:75: e8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:70:99:3C:06:F3:6E:F3:CF:68:5A:66:EE:6A:EB:0A:71:72:68:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/14cab7a4-9592-3724-82d8-0c2cba745ca8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/d7a960e2-9fa8-4b77-8609-5ee424f44087.crl X509v3 Authority Key Identifier: keyid:A2:A6:EF:CB:44:3A:94:85:33:05:1B:25:CC:81:A8:4A:7E:34:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087.cer sbgp-ipAddrBlock: critical IPv4: 216.219.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:65:91:62:02:e1:41:35:ca:31:eb:b5:d1:d5:a9:4d:f6:c6: 62:2d:e3:65:c5:49:d6:01:15:0e:fc:c0:2b:89:17:0d:fa:08: d0:ee:70:b3:85:98:51:44:01:cd:2f:00:7f:04:c4:a5:3d:b1: 54:b7:6c:52:4b:9f:b2:69:9c:c9:61:39:f4:38:1c:5f:42:05: d5:88:ae:63:31:fb:8c:4a:88:d1:da:1e:d8:3b:0d:97:db:09: 64:f0:78:79:7f:4d:a5:15:e2:23:38:91:ae:22:f1:5f:83:32: 61:8f:44:e5:d2:86:76:7b:20:dc:82:62:46:d3:fd:81:15:cf: 9f:ad:ef:23:48:61:61:07:f0:27:5c:50:48:3b:b8:f2:7e:f5: e6:91:51:f5:13:03:01:fc:fc:b1:01:7b:6a:c3:52:ab:67:8b: 18:49:80:35:32:e6:62:63:b6:3d:6c:cb:aa:69:be:13:22:5f: 95:75:b5:e9:b7:f0:d0:e6:03:00:1c:39:77:65:70:7c:f1:10: 12:f8:15:bb:76:94:07:e0:e4:2c:c2:e9:a4:01:22:5d:09:29: d2:b2:62:73:24:a4:68:cb:05:a3:b4:ed:2f:76:16:cf:75:de: a2:23:0a:34:78:98:04:a1:91:c7:f8:8d:b0:d8:8c:c4:a8:a8: d5:08:28:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvCcGbrpIgUdZcFb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdhOTYwZTItOWZhOC00Yjc3LTg2MDktNWVlNDI0ZjQ0 MDg3MB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk MzY2YjAyNWYtNWUxOS00NTU1LWIzMzktMzQxOWFiNzE4OGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt53xlhB4QnpYGqb92VdHWeIafeoivPqumuWu 2ejQj1gl3VjwymImug0SnoLV+yiNlEq+X4KU8928FMhlfrINZjQ1a/EFy/duWvqK 76jpDWd1YZ5GkgSSfbqASLFRnWYYQqCTujo9Z1HFjTop5XTxlX5eri7oLXe25irs kIxndakQFqNPG1aLWC+28gj+0YnFEhLa4/kuoxfKEfmaP30aYarpowDuRrwrFeEc jJ9XVYC6jUWr/YkMWsHcEn+c/Q5EddyAjURec3+y1XpBXiRalsK6RbV42emhGpnZ oQ5cxtqVqF+Hs512Af1kmyN35TtA1tfLRmBU/yokYZjGY3XoQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNwmTwG827zz2haZu5q6wpxcmiNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2E5 NjBlMi05ZmE4LTRiNzctODYwOS01ZWU0MjRmNDQwODcvMTRjYWI3YTQtOTU5Mi0z NzI0LTgyZDgtMGMyY2JhNzQ1Y2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdhOTYwZTItOWZhOC00Yjc3LTg2 MDktNWVlNDI0ZjQ0MDg3L2Q3YTk2MGUyLTlmYTgtNGI3Ny04NjA5LTVlZTQyNGY0 NDA4Ny5jcmwwHwYDVR0jBBgwFoAUoqbvy0Q6lIUzBRslzIGoSn40Wx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2E5NjBlMi05ZmE4LTRiNzctODYwOS01ZWU0 MjRmNDQwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2NtdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVlkWIC4UE1yjHrtdHVqU32xmIt42XFSdYBFQ78wCuJFw36CNDucLOF mFFEAc0vAH8ExKU9sVS3bFJLn7JpnMlhOfQ4HF9CBdWIrmMx+4xKiNHaHtg7DZfb CWTweHl/TaUV4iM4ka4i8V+DMmGPROXShnZ7INyCYkbT/YEVz5+t7yNIYWEH8Cdc UEg7uPJ+9eaRUfUTAwH8/LEBe2rDUqtnixhJgDUy5mJjtj1sy6ppvhMiX5V1tem3 8NDmAwAcOXdlcHzxEBL4Fbt2lAfg5CzC6aQBIl0JKdKyYnMkpGjLBaO07S92Fs91 3qIjCjR4mAShkcf4jbDYjMSoqNUIKN0= -----END CERTIFICATE-----Generated at Wed Nov 5 17:50:49 2025 by rpki-client